Does it log the port number(s) the UPnP event is allowing?
How many times, and how frequently have these events occured?
Yea it has the port number
it has literally been going all day. Unless its my moms kindle constantly connecting but it just happened again and shes sleeping so...
theres two by the way
I keep getting a
[DHCP IP ] which is one of them
and
UPnP is a different one
with a bunch of DoS Attack: ACK Scan from the same IP